diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-03-17 14:42:51 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-04-08 18:00:42 +0200 |
| commit | 72d542b69ae2f780d9c9307231dcc3a2e3bed3b7 (patch) | |
| tree | 2c12162c84a5dde3818852cf19c95f651abfe63e /extensions/libxt_REDIRECT.t | |
| parent | 14d77c8aa29a7b361d7830e40a7f75a05b29f717 (diff) | |
extensions: Merge REDIRECT into DNAT
Code is very similar, join them to reuse parsing code at least.
As a side-effect, this enables parsing of service names for ports in
DNAT as well as using port number 0 as that's what REDIRECT allows.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libxt_REDIRECT.t')
| -rw-r--r-- | extensions/libxt_REDIRECT.t | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/extensions/libxt_REDIRECT.t b/extensions/libxt_REDIRECT.t new file mode 100644 index 00000000..f607dd0a --- /dev/null +++ b/extensions/libxt_REDIRECT.t @@ -0,0 +1,16 @@ +:PREROUTING,OUTPUT +*nat +-p tcp -j REDIRECT --to-ports 42;=;OK +-p tcp -j REDIRECT --to-ports 0;=;OK +-p tcp -j REDIRECT --to-ports 65535;=;OK +-p tcp -j REDIRECT --to-ports 65536;;FAIL +-p udp -j REDIRECT --to-ports 0-0;-p udp -j REDIRECT --to-ports 0;OK +-p udp -j REDIRECT --to-ports 512-512;-p udp -j REDIRECT --to-ports 512;OK +-p udp -j REDIRECT --to-ports 42-1234;=;OK +-p tcp -j REDIRECT --to-ports 42-1234 --random;=;OK +-p tcp -j REDIRECT --to-ports 42-1234/567;;FAIL +-p tcp -j REDIRECT --to-ports ssh;-p tcp -j REDIRECT --to-ports 22;OK +-p tcp -j REDIRECT --to-ports ftp-data;-p tcp -j REDIRECT --to-ports 20;OK +-p tcp -j REDIRECT --to-ports ftp-ssh;;FAIL +-p tcp -j REDIRECT --to-ports 10-ssh;;FAIL +-j REDIRECT --to-ports 42;;FAIL |